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DETAILED ACTION 

1 . Appeal conference has been filed on 04/23/2007. The appellant's arguments and claims 
have been fully considered. The examiner called the applicant to include allowable feature to 
claim 9. Based on the interview examiner's amendment has been made for claim 9. 

EXAMINER'S AMENDMENT 

2. An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Kent J. Sieffert on 8/2/07. 

Claim 9 is amended as follows: 

9. (Currently Amended) A security system for controlling access to a computer 
network at a network access point comprising a workstation, said system comprising: 
A. a personal digital identifier device comprising: 

(a) a wireless communications component comprising a transceiver; 

(b) a biometric acquisition component for obtaining a user's input biometric and 
producing a digital representation thereof; 

(c) a processor configured for communicating with said transceiver and said 
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biometric component and operable for: 

(i) evaluating whether a template derived from said digital representation 
corresponds to a master template derived from a user's biometric digital 
representation previously produced by said biometric component and generating a 
matching signal when such a correspondence is determined; 

(ii) generating a private key to be held by said personal digital identifier device 
and a public key corresponding thereto and outputting said generated public key 
for transmission by said transceiver; 

(iii) producing a digital signature using said private key; and, 

(iv) verifying that an encrypted received message is from a security manager 
component using a public key for a private key associated with said security 
manager component; and, 

(d) secure storage containing said master template of a user's biometric, said 

generated private key and said public key for said private key associated with said 
security manager component, 
said personal digital identifier device being configured for producing, using said 
generated private key, a digitally signed challenge response message following said 
generating of said matching signal in response to a challenge received from said security 
manager component and for transmitting said response message, and said personal digital 
identifier device being configured to prevent transmission of any of said master template 
of a user's biometric and said private key; 
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B. a base unit associated with said workstation and configured for initiating and maintaining 
wireless communications with said personal digital identifier device, said communications 
extending over an area defined by an envelope associated with said workstation, wherein , during 
a currently logged-in session of the user associated with the personal digital identifier device, a 
policy manager component directs the workstation to blank out the screen when a second 
personal digital identifier device is detected at a location within said envelope until such time as 
a user registered to said second personal digital identifier device is biometrically identified; and, 

C. a central server having access to network storage and utilizing said security manager 
component and said personal digital identifier device for authenticating said user, said 
network storage containing a public key corresponding to said private key generated by said 
personal digital identifier device. 

Response to Arguments 

3. Appellant's argument regarding the references failure to teach blanking out the display 
when the second wireless device is detected while the first wireless device is in a logged-in 
session on the appeal brief is persuasive. 

Allowable Subject Matter 

4. Claims 1-21 are allowed. 

The following is a statement of reasons for the indication of allowable subject matter: 
Neither of the references applied teach the applicant's claimed invention wherein, during a 
currently logged-in session of the user associated with the personal digital identifier device, a 



Application/Control Number: 09/775,205 Page 5 

Art Unit: 2136 

policy manager component directs at least one of the workstations to blank out a respective 
screen when a unauthorized second personal digital identifier device is detected at a location 
within an envelope. 

Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 

Conclusion 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Eleni A. Shiferaw whose telephone number is 571-272-3867. 
The examiner can normally be reached on Mon-Fri 8:0pam-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser R. Moazzami can be reached on (571) 272-4195. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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